Handler returns an http.Handler for the API.

AuthHeaderName is the name of the header containing the token.

NoRequestForwardingHeaderName is the name of the header telling Vault not to use request forwarding.

WrapHeaderName is the name of the header containing a directive to wrap the response.